6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
29/06/2024, 05:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
Size

37KB
MD5

ef56ed4a383e6eb2efa34931770f7380
SHA1

22d6a8935c70258c4e8179030e28200fe226fbac
SHA256

6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38
SHA512

de668cb623a4b016bf015a6a70437f81401e06ece03258a725c9bd11b95ce67dd8efb7dda5bedb14803997a9b0e51084b796e3c3bacf4e5e6b8df82063092292
SSDEEP

384:GBt7Br5xjL9AgA71FbhvuNBN2TQ1nrq91ujF:W7BlpppARFbhknrAujF

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3862) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jre7\lib\ext\sunjce_provider.jar.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\ink\1.7\Microsoft.Ink.dll.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tabskb.dll.mui.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\MemoryAnalyzer.dll.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\feature.properties.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface_3.10.1.v20140813-1009.jar.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\fr\System.Data.Services.Client.resources.dll.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\images\Audio-48.png.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\zh-TW.pak.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\pmd.cer.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\images\cursors\win32_CopyDrop32x32.gif.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_few-showers.png.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\ga.txt.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_buttongraphic.png.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\ba.txt.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\charsets.jar.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Kentucky\Monticello.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\System.IdentityModel.Selectors.Resources.dll.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\spu\libmarq_plugin.dll.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\sqloledb.rll.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_hu.jar.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\TipBand.dll.mui.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\MST.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Panama.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\fr\System.Web.Entity.Resources.dll.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\Vdk10.lng.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\feature.xml.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-spi-actions_ja.jar.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2iexp.dll.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\grayStateIcon.png.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\jp2native.dll.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Windows NT\TableTextService\TableTextService.dll.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\engphon.env.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\policytool.exe.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director_2.3.100.v20140224-1921.jar.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-keyring-fallback.jar.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Indian\Maldives.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\css\flyout.css.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\System.Data.Linq.Resources.dll.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-swing-plaf.xml.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-cli.xml.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-openide-execution.xml_hidden.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-remote_ja.jar.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_sse2_plugin.dll.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\Templates\Dotted_Line.jtp.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_floating.png.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\stop_collection_data.gif.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\bookbig.gif.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Pangnirtung.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Los_Angeles.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.DirectoryServices.AccountManagement.dll.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_videoinset.png.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-uisupport_zh_CN.jar.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ALRTINTL.DLL.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-editor-mimelookup-impl.jar.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\es-ES\wmpnssci.dll.mui.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\RSSFeeds.html.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\glass.png.tmp	6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\6b8060a7eff1acbbf66d3e402562c506b04e2a7254a94eac272f2603e740db38_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:1700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-481678230-3773327859-3495911762-1000\desktop.ini.tmp

Filesize
37KB

MD5
541b7e238426edd08dc25ebd12423c6e

SHA1
71f5b042774c21a93bbaef51e519fea66d5b5dbd

SHA256
fb3284635bc0e3ccebcfbe659a367aea526b1a7ad07f7bc1399fa385180d02f7

SHA512
f9ac476c64e7d582f7af1d9cc5313da3e198d771d06e4950fd099e219ae548215df4e85525b97d376704b96460cd1b0d95aeedde086cf0dc29fc7725436fd90b

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
46KB

MD5
7c02567d3ed77f34014631a2b7d0708b

SHA1
39f683a939ddafabe94efd31aee64fefb8df1e8b

SHA256
d3524bdc615df588a74a213b3ccffb3a5a1a5b29c28078f13cb9a4b3d51a824b

SHA512
90663a3a5f0ee3062c146a738cef19d07386fa06bd2038476985947285dfb0cc13b436747a052ad9a6fea5aefd9aec013b667f580735fc58c55c14b0fd2ce536

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads